3 commits

Author	SHA1	Message	Date
Adam Moussa	cf5efb06ec	fix(infra): keep the file share off the public internet (PLAT-77) ... The instance has no public IP. Office routes use the syslog VPN gateway and other egress uses a NAT gateway. DLM targets the tagged data volume, and replacement detaches stop the instance first.	2026-09-28 16:51:29 -04:00
Adam Moussa	dadcf1c5ce	fix(infra): pin FileBrowser version to a release tag (PLAT-77) ... The version is interpolated into the boot script. Reject anything that is not a vX.Y.Z tag.	2026-09-28 16:40:23 -04:00
Adam Moussa	7cb3f6510f	feat(infra): add HCP Terraform for the prod file share (PLAT-77) ... The prod host will live on a subnet in the syslog VPC. The data volume stays unmanaged and is attached only after a snapshot copy.	2026-09-28 16:38:03 -04:00